Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/58a10bb5-c049-31c7-b06c-5c15c054c11b.roa
File:                     58a10bb5-c049-31c7-b06c-5c15c054c11b.roa (raw, json)
Hash identifier:          GmETUNAcTJIIpq4NfX1r6iyxvC3TJmMyKxvsm4PF1jg=
Subject key identifier:   D3:25:69:BD:AA:63:0F:96:4A:E9:23:E8:E0:54:8B:6A:D8:64:B4:A0
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584AECC11C188AB1A0F8BEB60F80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/58a10bb5-c049-31c7-b06c-5c15c054c11b.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     203
IP address blocks:        8.12.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:1c:18:8a:b1:a0:f8:be:b6:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=5bf1ffa4-4ea3-4243-a859-63bd8e1827d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:07:c7:bf:8f:2b:47:04:70:e2:66:a2:78:b5:
                    ab:fd:06:94:11:38:79:0a:bc:ce:9d:ef:6b:08:58:
                    fd:8d:a3:c3:c0:0c:06:ce:a4:9a:32:34:b9:26:1f:
                    14:0e:11:72:15:6b:ce:13:51:15:12:6f:33:ef:db:
                    11:26:19:0b:53:84:db:65:73:5b:58:ff:85:61:7e:
                    0e:8d:d2:9a:66:c4:83:6b:6f:56:de:55:8b:ec:71:
                    13:a6:90:d4:01:2f:55:87:bf:65:bd:99:6d:f0:a2:
                    dc:e6:c7:ae:77:83:ff:9d:c6:ab:f6:bf:66:f1:c1:
                    1e:49:6d:84:7c:79:6e:af:6b:0c:93:94:c2:62:2f:
                    b6:d4:b3:6b:91:29:92:ec:0e:a4:8b:55:66:80:4b:
                    9e:dd:ce:8a:88:64:10:04:43:08:d0:7c:58:80:be:
                    03:3c:96:94:b9:2e:01:1c:1f:76:af:e3:6f:a1:6a:
                    5f:09:26:5e:80:02:b5:76:24:a0:ae:1d:a3:2a:44:
                    91:3d:f7:b4:7e:7a:cd:d0:42:35:fd:0e:94:37:9f:
                    68:2d:30:9a:37:b5:7f:50:e1:bd:79:32:bf:77:d3:
                    47:15:a1:85:d4:8d:ca:78:72:40:b3:61:13:56:a8:
                    a7:bf:8f:e2:82:88:e2:82:bb:62:61:39:1c:4f:6c:
                    58:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:25:69:BD:AA:63:0F:96:4A:E9:23:E8:E0:54:8B:6A:D8:64:B4:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/58a10bb5-c049-31c7-b06c-5c15c054c11b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.12.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:c9:99:c5:74:db:52:ae:46:9f:f8:b8:20:ea:1d:8f:d4:39:
         82:13:f4:bc:cc:62:8b:8b:a9:1b:cc:8b:ae:35:fb:7b:ea:be:
         a4:90:61:4a:e2:3c:fd:90:31:72:4e:a8:45:ba:3e:75:66:03:
         45:3b:8e:0d:71:ce:66:0e:b6:a5:62:22:97:85:f5:04:51:a8:
         60:76:ec:0a:7e:d4:52:96:88:25:b7:83:27:d7:b5:17:bb:6b:
         b3:67:e9:d1:9a:76:37:17:95:57:f4:a8:98:af:44:3f:ad:3e:
         64:74:45:0b:a0:e6:7e:7b:fd:b9:4f:30:88:aa:ba:03:d5:e8:
         a0:fb:10:78:d9:01:18:c9:a7:15:80:ae:8f:bf:ca:4a:91:46:
         85:e4:7c:18:29:8c:28:15:62:01:82:c8:54:0c:3f:ad:d0:4f:
         96:c6:72:3a:69:bc:ea:9b:b2:9f:8d:89:92:33:3f:1e:80:1f:
         0b:09:70:b2:88:0a:fa:67:ff:e1:ba:76:de:db:3f:7e:92:39:
         22:a3:46:22:84:82:67:c1:57:30:f8:35:65:62:ff:d7:27:fb:
         9e:f7:51:fd:98:7d:93:6c:ab:0f:ec:94:48:ea:25:63:79:2a:
         73:ae:db:4e:4f:29:b3:b8:d9:89:2a:46:dd:04:be:df:87:a1:
         59:53:c3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:39 2025 by rpki-client